TDRE Filtering and QoS TDRE Version 11.0

The first choice for the mile p.2 IP filtering >With extended access lists >define in router/trafficPolicy with method trafficShaping >Filter on IP addresses, IP protocol, UDP/TCP port numbers and TOS value >Apply on incoming and outgoing traffic per interface LAN WAN accessPolicy trafficPolicy accessPolicy

The first choice for the mile p.3 Bridge filtering >Access lists >On outgoing traffic >On source MAC address Bridge VLAN switch LAN WAN accessList

The first choice for the mile p.4 Additional bridge filtering >Device in bridging is manageable via an IP address >Broadcasts and multicasts can be prevented from flooding to all interfaces with interface attribute limitBroadcast Bridge group IP address limitBroadcast = disabled limitBroadcast = enabled broadcast / multicast

The first choice for the mile p.5 Router Bridge or VLAN switch Filtering on IP protocol stack >= filtering of packets destined for this device >management protocols: e.g. TMA, telnet, HTTP, SNMP >DHCP requests >termination of L2TP and IPSec tunnels >Several possibilities: 1.Per interface an attribute to accept/discard all management traffic from this interface 2.Simple access list accessList (on source IP addresses) or extended access list accessPolicy 3.Attributes to accept/discard resp. SNMP, telnet & HTTP, TFTP, FTP traffic LAN WAN SNMP Others TFTP telnet & HTTP FTP

The first choice for the mile p.6 IP QoS >7 queues per interface >Queue 1 – 5 >Low delay queue >System queue for e.g. control protocols (PPP LCP, F.R. LMI, ATM OAM…) >Traffic policy: maps IP traffic to a queue >traffic shaping: classification on IP addresses, IP protocol, UDP/TCP port numbers and TOS bits >diffServ: fixed mapping to queues and 3 drop levels based on 2 TOS bits >TOS mapped: configurable mapping on TOS bits only >Priority policy: defines policy to empty the queues >FIFO, Round robin, Absolute priority, WFQ, Low delay WFQ >Includes also bandwidth control (cir) per queue >System queue has always absolute priority Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 Sys Queue IP traffic policy priority policy cir

The first choice for the mile p.7 IP QoS >Policy based routing: routing is based on higher layer protocols >IP addresses, IP protocol, UDP/TCP port numbers and TOS bits trafficPolicy interface/gateway1 interface/gateway3 interface/gateway2

The first choice for the mile p.8 VLAN QoS >In bridged and VLAN switching modes >Applicable only on VLAN packets (P bits) >Traffic policy based on P bits value >IP TOS to VLAN COS mapping during tagging Bridge VLAN switch Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 VLAN traffic policy priority policy cir

The first choice for the mile p.9 QoS on Ethernet interfaces Ethernet interface Router Bridge or VLAN switch Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 Intf queue traffic policy priority policy cir

The first choice for the mile p.10 QoS on PPP interfaces without fragmentation >attribute delayOptimisation=lowSpeedLinks reduces interface queue length for low speed links PPP interface Router Bridge or VLAN switch Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 Intf queue traffic policy priority policy cir delayOptimisation Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5

The first choice for the mile p.11 QoS on PPP interfaces with fragmentation >Mostly fragmentation is used with PPP for QoS (especially if link speed < 2Mbps) >Fragmentation enable/disable per interface (not per class) >Use Multi-Class PPP for QoS >Each class = like a separate interface >Define a PPP bundle to apply MC PPP >Each class uses one priority queue (configurable per class) >No need to apply traffic policy >Apply priority policy on the physical interface PPP interface Router Bridge or VLAN switch Intf queue Class 1 Class 6 Class 3 Class 2 Class 4 Class 5 or policy based routing priority policy fragmen- tation cir Class 1 Class 6 Class 3 Class 2 Class 4 Class 5

The first choice for the mile p.12 QoS on Multilink PPP interfaces (with fragmentation) >Use Multi-class PPP similar to previous case PPP interfaces Router Bridge or VLAN switch Intf queue Class 1 Class 6 Class 3 Class 2 Class 4 Class 5 or policy based routing priority policy Intf queue Class 1 Class 6 Class 3 Class 2 Class 4 Class 5 fragmen- tation traffic split over different interfaces priority policy cir Class 1 Class 6 Class 3 Class 2 Class 4 Class 5

The first choice for the mile p.13 QoS on Frame Relay interfaces without fragmentation >One priority policy per physical interface >CIR configurable on priority queue and DLCI levels F.R. interface Router Bridge or VLAN switch Intf queue priority policy cir per queue Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 traffic policy DLCI DLCI cir & eir Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 delayOptimisation traffic policy

The first choice for the mile p.14 QoS on Multilink Frame Relay interfaces without fragmentation Router Bridge or VLAN switch Intf queue cir per queue Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 traffic policy DLCI DLCI cir & eir Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 traffic policy F.R. interfaces Intf queue priority policy priority policy Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5

The first choice for the mile p.15 QoS on Frame Relay interfaces with fragmentation >Fragmentation packet size fixed at 200 bytes >Use multiple DLCIs per destination for different traffic classes >Each DLCI uses one priority queue (default queue configurable per DLCI) >No need to apply traffic policy >Apply priority policy on the physical interface F.R. interface Router Bridge or VLAN switch Intf queue DLCI or policy based routing priority policy fragmen- tation DLCI cir & eir DLCI

The first choice for the mile p.16 QoS on Multilink Frame Relay interfaces (with fragmentation) >Define a bundle interface >Apply same principles on bundle interface as on a physical interface >Note: Cisco IOS routers don’t support F.R. fragmentation on Multilink F.R. F.R. interfaces Router Bridge or VLAN switch Intf queue DLCI or policy based routing priority policy Intf queue DLCI fragmen- tation at DLCI level traffic split over different interfaces priority policy DLCI DLCI cir & eir fragmen- tation at intf level

The first choice for the mile p.17 Frame Relay Fragmentation options >Fragmentation at DLCI level >= End-to-end fragmentation >Fragmentation at interface level >= segment fragmentation (up to a switch) Router Bridge or VLAN switch intf DLCIs Frame Relay Switch Router Bridge or VLAN switch intf DLCIs segment fragmentation (intf to intf) end-to-end fragmentation (per DLCI)

The first choice for the mile p.18 QoS on ATM interfaces >Each PVC behaves completely as a physical interface >AAL5 SAR (= fragmentation) occurs at the end ATM interface Router Bridge or VLAN switch priority policy cir per queue Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 traffic policy PVC traffic policy pcr Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 PVC queue Cell queue AAL5 SAR priority policy Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 PVC queue

The first choice for the mile p.19 QoS on ATM IMA interfaces ATM interfaces Router Bridge or VLAN switch priority policy cir per queue Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 traffic policy PVC traffic policy pcr Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 PVC queue Cell queue AAL5 SAR priority policy Queue 1 LD Queue Queue 3 Queue 2 Queue 4 Queue 5 PVC queue Cell queue

The first choice for the mile p.20 Applying QoS on traffic within a VPN tunnel >For L2TP and IPSec tunnels >Applying traffic policy on traffic destined for the tunnel is only useful for setting TOS (DSCP) bits (priority field remains unused) >Set copyTos parameter in the l2tp structure on >Define another traffic policy and priority policy on the lower layer interface Router Bridge or VLAN switch traffic policy TOS bits set L2TP tunnel TOS bits copied to outer IP header traffic policy lower layer interface Intf queue priority policy other data for same lower layer interface